Terrain Route Video

PassAudited by ClawScan on May 1, 2026.

Overview

The skill appears to do what it says—generate route videos—while using public map services and unpinned Python setup dependencies that users should notice.

This skill looks appropriate for generating a route video. Before installing, run it in a fresh folder and virtual environment, understand that route locations may be sent to OSRM/OpenTopoMap, and expect local output folders such as frames/ and .tile-cache/.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private or sensitive route locations may be visible to OSRM/OpenTopoMap through routing and tile requests.

Why it was flagged

The script contacts public routing and map-tile providers using the user's route coordinates or tile area. This is disclosed and necessary for the stated purpose, but it can reveal trip locations to third parties.

Skill content
"https://router.project-osrm.org/route/v1/driving/" ... "https://a.tile.opentopomap.org/{zoom}/{tx}/{ty}.png"
Recommendation

Avoid using sensitive routes with public services, or adapt the workflow to use local/private routing and tile sources if location privacy is important.

What this means

Future package changes or a compromised package source could affect the local environment where the skill is run.

Why it was flagged

The setup uses unpinned PyPI packages. This is a normal, purpose-aligned setup path for a Python rendering script, but dependency versions and sources are not fixed.

Skill content
pip install -U pip
pip install numpy matplotlib pillow requests
Recommendation

Install in a dedicated virtual environment, consider pinning versions, and use trusted package indexes before running the script.